This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
File: RR75NZqYT2pM-R_pAE6usImphMA.mft (raw, json)
Hash identifier: pdgsoHLCpkMPOdVaTPKvytjXQZcfL6IH9P/ak3y3Dtg=
Subject key identifier: D2:28:D0:31:88:79:5D:A5:39:8B:B6:19:4C:48:13:51:2F:74:72:7E
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial: 0E3C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
Manifest number: 0DC5
Signing time: Sat 20 Dec 2025 10:10:53 +0000
Manifest this update: Sat 20 Dec 2025 10:10:53 +0000
Manifest next update: Mon 22 Dec 2025 10:10:53 +0000
Files and hashes: 1: CW3FD_TRmwzrR5Jpt7o0abja2JM.roa (hash: GlTKZP/hOiZTcp9R5UgObTobUqRvgQ62iUZSERW23PI=)
2: HIn29CGuAQNtrj9OXBhIijXsgBE.roa (hash: PcZYhGaMl/1BgPxPji5pTYLO5Gaswp9aGi2I5xIZSgc=)
3: RR75NZqYT2pM-R_pAE6usImphMA.crl (hash: BNuoHIH0jbj4a54cORZym9DPB1usipij1ZePK9H8hdY=)
4: VjDU2J7rmEn3_o9XZDDvUKAynYk.roa (hash: knJ2LltoiM/NmGRfnUGfd1y70/tR4qWdTRyPp/xwdRQ=)
5: Ztqj2vutrtxn91_xBwETU95khs4.roa (hash: YIU3Ann+HCAVJ2BsdytckBIw3NnX0kuthRii/YGQkoE=)
6: atUwJIKFrDyvVHD-_XMj0YDtvmI.roa (hash: SapC8vJuEGKRwGQlQcjqEo9/M2fJ6wGFGEG9eLaA+2I=)
7: lDXkCpHVcwy4jmBk1-5_Fgv0zCM.roa (hash: RvOTlLd/g2+74MOjMOGFkca9kSPWYkMR8fo0fSOYGMo=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 20:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3644 (0xe3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Validity
Not Before: Dec 20 10:10:53 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=D228D03188795DA5398BB6194C4813512F74727E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2e:f7:a4:1c:54:16:63:3c:5d:6c:66:8b:c2:
bb:16:10:4a:c4:ab:96:08:10:8d:49:cb:9e:79:5a:
d6:02:eb:09:b6:0f:23:f8:1b:2f:00:9f:55:9a:80:
d6:a6:8d:bd:89:3a:39:d3:cc:fa:6d:29:81:75:5b:
26:e9:29:a9:31:d7:cc:3b:23:c9:70:9f:28:4b:99:
3d:04:25:85:9a:48:24:3a:e7:da:c4:52:f9:2b:c8:
90:75:97:c8:3d:a0:ef:e5:47:17:71:ed:bd:c1:13:
8a:1c:f9:29:1a:45:9b:ed:c9:88:77:3a:4a:db:03:
00:e8:dc:64:e6:ff:16:69:c7:63:db:f7:12:50:18:
bc:05:64:51:60:e3:e8:f9:58:10:cb:01:e1:29:7e:
4e:0e:cb:ec:10:98:d4:f6:de:9b:a7:89:6c:0b:f2:
50:a6:02:63:57:35:60:1b:f0:c0:c8:f5:69:f9:23:
dc:fe:9c:82:be:8b:1f:ca:a2:ac:30:be:54:3e:75:
d4:a4:51:7b:45:bd:0a:d8:8b:b7:d9:b5:07:87:8f:
86:f9:57:68:0b:20:bc:69:93:8b:06:1c:88:d1:1d:
50:11:93:02:e0:a3:e9:06:67:f5:41:91:8f:f8:1d:
46:67:78:58:9d:c9:82:f7:e9:3f:fd:b6:4c:c7:23:
4e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:28:D0:31:88:79:5D:A5:39:8B:B6:19:4C:48:13:51:2F:74:72:7E
X509v3 Authority Key Identifier:
keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e6:b2:59:53:dd:f6:26:cb:fe:53:a1:64:c3:09:de:0f:b9:
75:0e:1a:6f:2b:37:c7:f6:b6:5b:f4:4d:7d:4d:d0:47:fc:47:
87:20:b8:ca:21:a4:57:30:a4:ba:8c:a0:95:79:c3:f9:91:65:
c0:b2:be:0b:07:4a:d1:46:b7:20:e2:55:71:85:1e:a1:70:bd:
67:eb:ba:16:90:e8:ed:dc:aa:54:3b:55:0b:e6:90:57:ac:5c:
2e:fb:29:37:ec:09:04:16:74:fc:53:f8:43:b4:f0:84:0e:77:
9c:2a:88:92:9e:ef:d6:15:c9:49:a8:e6:09:fb:56:db:4b:2e:
17:64:8f:b2:04:fa:26:52:cf:45:8e:a0:46:c2:27:00:b7:58:
56:5f:41:b0:91:ca:d3:84:b6:cb:b8:cc:9a:54:28:57:0b:5e:
5b:70:ff:46:36:a0:67:11:9f:9d:a7:f6:d3:69:34:01:34:21:
ff:3a:02:b4:0b:26:5d:de:ed:5f:5c:b8:12:50:5a:23:8c:45:
b0:2f:3d:b5:d8:0e:4b:53:23:69:f8:27:f7:14:4d:c9:cb:7d:
6e:cf:e6:4e:0b:10:fd:93:1e:73:91:97:04:f0:d7:8a:e5:8f:
5b:cc:3c:29:76:90:ce:c4:23:74:93:b9:86:cb:ea:45:c9:d0:
a3:5e:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:17:18 2025 by rpki-client